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1.A systems administrator needs to apply a custom ESXi image to a host using VMware Imaging 
Appliance (VIA). 

Which statement is correct when preparing a host for imaging? 

A. Onboard NICs should be enabled on the server. 

B. VIA service does not support UEFI boot mode. 

C. VMware Cloud Builder appliance must be deployed in a tagged VLAN/Network. 

D. PXE Boot must be configured as the second boot option. 

Answer: A 

Explanation: 

This is because VIA service uses PXE boot to install ESXi on the servers, and it requires onboard NICs to 
be enabled and connected to an untagged VLAN/Network1. 

According to VMware documentation on VMware Imaging Appliance, when preparing a host for imaging 
using VIA, it is recommended to enable the onboard NICs on the server. This enables the network 
adapter to participate in the boot sequence of the host to retrieve the image from the Imaging Appliance. 
Here is the relevant quote from the documentation: 

"To prepare the host, ensure that the onboard NICs are enabled on the server. During boot up, the server 
firmware detects the network adapter and adds it to the boot sequence list so that it can participate in 
network boot." 
https://docs.vmware.com/en/VMware-Cloud-Foundation/4.5/vcf-deploy/GUID-735928E5-1DD7-44E5-BE 
32-E598230326AD.html 


2.A VMware Cloud Foundation administrator created a Tanzu Namespace in one of the workload 
domains. 

Which two functions related to permissions can be performed on the newly created Namespace? 
(Choose two) 

A. Add permissions only from the vSphere.local domain. 

B. Permissions can be set to either view or edit. 

C. Add permissions to users from vCenter Single Sign-On identity sources. 

D. Add a custom role to create more granular permissions. 

E. Add permissions to local vSphere with Tanzu users only. 

Answer: C,D 

Explanation: 

A quote from reference [1] states that, "To add permissions to users or groups from vCenter Single 
Sign-On identity sources, the Tanzu Kubernetes cluster administrator can use either the vSphere Client or 
kubectl." 

Another quote from reference [1] states that, "By default, a Tanzu Kubernetes cluster includes a set of 
predefined roles that provides granular permission control for Kubernetes objects. The predefined roles 
enable cluster groups to be created with specific permissions across the Kubernetes namespace 
hierarchy. Administrators can also create custom roles to provide more granular permission control that is 
specific to their organization's requirements." 

References: [1] Tanzu Kubernetes Cluster or Supervisor Cluster[1]: Which do | choose? - 
https://blogs.vmware.com/virtualblocks/2022/06/23/tanzu-kubernetes-cluster-or-supervisor-cluster-which- 
do-i-choose/ 
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3.A systems administrator wants to integrate Microsoft Certificate Authority with SDDC Manager and has 
already established a connection between the components. 

Which pre-requisite step is required for this integration to work? 

A. Verify that the self-signed certificates have been replaced with signed certificates from Microsoft 
Certificate Authority. 

B. Verify that a customized certificate template has been configured on the SDDC Manager 

C. Verify that the Microsoft Certificate Authority Server has the RBAC roles configured on the same 
machine where the Certificate Authority role is installed. 

D. Verify that the Microsoft Certificate Authority Server has been configured for basic authentication 
Answer: D 

Explanation: 

This is because according to VMware documentation6, when integrating Microsoft Certificate Authority 
with SDDC Manager, you need to configure basic authentication on the Microsoft Certificate Authority 
Server and provide valid credentials when establishing a connection from SDDC Manager. 


4.A VMware administrator is tasked to upgrade a VMware Cloud Foundation (VCF) environment that is 
running on DellEMC PowerEdge servers. 

During the ESXi software upgrade for the VI Workload Domain hosts, the administrator receives an error 
stating that the correct storage driver is not available, although the storage adapters are enabled in the 
BIOS. 

Which action should the administrator take to fix this issue? 

A. Use the Dell EMC customized image for the ESXi build in the VCF bill of materials. 

B. Upgrade the storage adapter firmware to the latest version. 

C. Use the image for the ESXi build in the VCF bill of materials. 

D. Upgrade the BIOS firmware to the latest version. 

Answer: A 

Explanation: 

when upgrading ESXi software on Dell EMC PowerEdge servers using SDDC Manager Lifecycle 
Management (LCM), you must use a Dell EMC customized image that contains drivers for specific 
hardware components such as storage adapters. 
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere. virtualsan.doc/GUID-08911FD3- 
2462-4C1C-AE81-OD4DBC8F7990.html 


5.Which two steps must be performed to create a vSphere with Tanzu namespace? (Choose two.) 
A. Deploy a vSphere Cluster 

B. Define resource limits 

C. Enable Harbor Image Registry 

D. Assign permissions 

E. Use a DNS-compliant name 

Answer: B,E 

Explanation: 

According to How to Create a vSphere with Tanzu Namespace’ and Create and Configure a vSphere 
Namespacez2, two of the steps required to create a vSphere with Tanzu namespace are: 

œ Define resource limits: You can specify CPU, memory, and storage limits for each namespace to 
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control how much resources are available for the workloads running in that namespace. 
c® Use a DNS-compliant name: You must provide a unique name for each namespace that is compliant 
with DNS naming conventions. 


6.Which license is required to enable Workload Management on VMware Cloud Foundation? 

A. VMware vSphere Evaluation 

B. VMware vSphere Standard 

C. VMware vSphere Enterprise Plus 

D. VMware Tanzu Basic 

Answer: D 

Explanation: 

A Tanzu Basic license is required to enable Workload Management on VMware Cloud Foundation. Once 
enabled, the Supervisor Cluster must be assigned a Tanzu license before the 60-day evaluation period 
expires. This license can be added to the license inventory of vSphere if a valid Tanzu Edition license is 
available. 

Reference: VMware Cloud Foundation Specialist (v2) Exam Guide, Section 3: VMware vSphere with 
Tanzu, VMware Documentation: VMware Tanzu Kubernetes Grid Documentation A Tanzu Basic license is 
required to enable Workload Management on VMware Cloud Foundation. Once enabled, the Supervisor 
Cluster must be assigned a Tanzu license before the 60-day evaluation period expires. This license can 
be added to the license inventory of vSphere if a valid Tanzu Edition license is available. 

Reference: VMware Cloud Foundation Specialist (v2) Exam Guide, Section 3: VMware vSphere with 
Tanzu, VMware Documentation: VMware Tanzu Kubernetes Grid Documentation 
https://docs.vmware.com/en/VMware-Cloud-Foundation/4.2/com.vmware.vcf.vxrail.admin.doc/GUID-E8D 
0A432-8573-4DF5-9330-A4FE15F74128.html 


7.During a VCF design workshop, the architect gathered the following customer requirements: 

e There must be two environments: PROD and DEV. 

* PROD and DEV should be administratively separated. 

e PROD will use two different hardware server types, and DEV will only use one hardware server type. 

e The VCF infrastructure design should be flexible and scalable as much as possible 

How many NSX local managers in total will be provisioned after deploying the full VCF infrastructure? 

A. 6 

B. 3 

C. 12 

D.9 

Answer: D 

Explanation: 

According to the VMware documentation, each NSX-T Local Manager is associated with a vCenter Server, 
and each NSX-T Local Manager can manage up to three vCenters. In a VCF deployment with two 
environments (PROD and DEV) and two different hardware server types in PROD, there would be a total 
of three vCenter Servers. Therefore, a total of three NSX-T Local Managers would be provisioned to 
manage the three vCenter Servers. 

Reference: VMware Cloud Foundation Specialist (v2) documentation on vmware.com (in particular, the 
"NSX-T Networking for VMware Cloud Foundation" chapter). 
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8.An administrator successfully finished restoring a SDDC Manager and now needs to verify its operation. 
Which tool should the administrator use for this verification? 

A. vRealize Operation plugin tool forVCF 

B. Support and Serviceability (SoS) tool 

C. SDDC Manager GUI restore health tool 

D. Ruby vSphere Console VCF check tool 

Answer: B 

Explanation: 

This is because according to VMware documentation§, this is the tool that an administrator should use for 
verifying the operation of SDDC Manager after restoring it from a file-based backup. The SoS tool can run 
various tests and checks on SDDC Manager and its components to ensure their health and functionality. 


9.An administrator is tasked with deploying a VMware Cloud Foundation environment that consists of 
three VI Workload Domains. Each VI Workload Domain is comprised of two clusters, with 18 hosts in 
each cluster. 

Which option fulfills this requirement while minimizing the number of NSX-T Manager instances? 

A. Deploy one large-sized NSX-T Manager cluster for all VI Workload Domains. 

B. Deploy one medium-sized NSX-T Manager cluster for all VI Workload Domains. 

C. Deploy one medium-sized NSX-T Manager cluster per VI Workload Domain 

D. Deploy one large-sized NSX-T Manager cluster per VI Workload Domain. 

Answer: B 

Explanation: 

According to NSX Manager VM and Host Transport Node System Requirements23, an NSX-T 
management cluster formed using a medium-sized appliance can support up to 128 hypervisors. Since 
each VI Workload Domain has 36 hosts (18 x 2), and there are three VI Workload Domains, the total 
number of hosts is 108 (36 x 3), which is within the limit of a medium-sized NSX-T Manager cluster. 


10.An administrator needs additional capacity on a vSAN cluster. Each host currently has only one disk 
group. 

Which two approaches can be used to expand storage capacity in this situation? (Choose two.) 

A. Increase the number of cache disks in the existing disk group. 

B. Add an additional disk group. 

C. Disable compression. 

D. Increase the number of capacity disks in the existing disk group 

E. Disable deduplication. 

Answer: B,D 


